← Database

CVE-2007-1392

MEDIUM CVSS: 5.0 Published: 2007-03-10 Modified: 2026-06-16

Description

Directory traversal vulnerability in down.php in netForo! 0.1g allows remote attackers to read arbitrary files via a .. (dot dot) in the file_to_download parameter.

Affected Platforms

Netforo Netforo

Weakness Type

NVD-CWE-Other

References